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A SYSTEM, DEVICE AND COMPUTER READABLE MEDIUM 
FOR PROVIDING NETWORKING SERVICES ON A MOBILE DEVICE 

Field of the Invention 
5 This invention relates generally to networks. 

Background of the Invention 
Managing and monitoring networks, such as wide area networks 
('WANs") and local area networks ("LANs"), is a very important function. 
An operator of a network needs to monitor network configuration 
10 and operation in order to maximize usage and accessibility of network 
services. An operator can use such information in reconfiguring a 
network or adding network service. A network operator also desires 
flexibility in easily adding network services without requiring user 
intervention. Often, a user does not have the technical ability or desire to 
15 reconfigure or add network services. 

A user of a network is generally interested in particular 
applications that provide specific results, such as an application for 
retrieving an address from a database. Typically, a user of a network is 
not interested in network configuration and adding network services as 
20 long as the user's applications are providing results in a timely manner. 

A wireless communication device, such as a cellular telephone, is 
typically a node of a WAN or communication network managed by a 
telecommunication operator. As described above, the user of a cellular 
telephone is typically not interested in a particular network configuration 
25 as long as particular applications are providing the desired results. 
However, the cellular telephone may also be a part of a LAN or network 
for communicating with other user devices, such as a laptop or Personal 
Digital Assistant ("PDA"). For example, Bluetooth™ technology 
(www.Bluetooth.com) provides wireless communications between 
30 devices. These other LAN devices may have applications that access 
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the WAN; yet, a telecommunication operator has no visibility as to 
statistics on usage profiles of particular LAN devices and/or applications. 
The cellular telephone acts as a wall to prevent the telecommunication 
operator from monitoring or managing LAN devices and/or applications. 
5 Moreover, the telecommunication operator cannot easily add network 
services to the LAN without user intervention. 

Therefore, it is desirable to provide a system, device and 
computer readable medium that allows a network operator to manage 
and monitor usage profiles of devices and applications on a LAN. It is 

10 further desirable to provide a system that allows a network operator to 
easily reconfigure or add network services to a LAN without user 
intervention. LAN devices then may be able to share information and 
services. In particular, it is desirable to provide a system that monitors 
usage profiles of devices and/or applications communicating with a 

15 cellular telephone. 



SUMMARY OF THE INVENf ION 
A hand-held device for providing communication between a wide 
area network and a wireless local area network is provided according to 
20 an embodiment of the present invention. The device comprises a 
storage device coupled to a processor. The storage device stores a 
router software component for transferring a packet between the wide 
area network and the wireless local area network. 

According to an embodiment of the present invention, the packet 
25 is an Internet Protocol ("IP") packet. 

According to an embodiment of the present invention, the wide 
area network includes a plurality of public IP addresses and the wireless 
local area network includes a plurality of private IP addresses. The 
router software component translates the first IP address in the plurality 
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of public IP addresses to a second IP address in the plurality of private 
IP addresses. 

According to another embodiment of the present invention, the 
device includes a Bluetooth™ processor and a 2.4 GHZ transceiver. 
5 According to still another embodiment of the present invention, 

the wide area network is the Internet, cellular network, corporate network 
and/or private IP network. 

According to another embodiment of the present invention, the 
wireless local area network is a Bluetooth™ wireless local area network 
10 and/or an 802.1 1 wireless local area network. 

According to another embodiment of the present invention, the 
router software component includes a network address translator 
("NAT") software component for translating between a first wide area 
network address and a first local area network address. 
15 According to another embodiment of the present invention, the 

router software component includes a network address port translation 
("NAPT") software component for translating between a first wide area 
network address and a first local area network address. 

According to an embodiment of the present invention, the router 
20 software component includes a local routing software component for 
routing the IP packet between a first wireless device in the wireless local 
area network and a second wireless device in the wireless local area 
network. 

According to an embodiment of the present invention, the router 
25 software component includes an interface for adding a first network 
service software component for providing a network service to the 
wireless local area network. 

According to still another embodiment of the present invention, 
the first network service software component is loaded into the storage 
30 device from a managing processing device in the wide area network. 
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According to another embodiment of the present invention, the 
first network service software component is loaded into the storage 
device during manufacturing of the hand-held device. 

According to another embodiment of the present invention, the 
5 first network service software component is a pairing management 
software component for determining whether a first wireless device is 
coupled to the wireless local area network. 

According to another embodiment of the present invention, the 
first network service software component is a virtual private network 
10 software component for establishing a secure link. 

According to another embodiment of the present invention, the 
first network service software component is a firewall software 
component. 

According to an embodiment of the present invention, the first 
15 network service software component is a statistics software component 

for collecting usage information of the wireless local area network. 

According to an embodiment of the present invention, the 

statistics software component collects usage information of a wireless 

device in the wireless local area network. 
20 According to an embodiment of the present invention, the 

statistics software component collects usage information from an 

application software component in a wireless device in the wireless local 

area network. 

According to an embodiment of the present invention, the first 
25 network service software component includes a link optimization 
software component for converting the IP packet from a first wireless 
device in the wireless local area network to an optimized cellular 
protocol packet transferred to a processing device in the wide area 
network. 
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According to an embodiment of the present invention, the first 
network service software component includes a reverse firewall software 
component for dropping a packet from a first wireless device in the 
wireless local area network. 
5 According to an embodiment of the present invention, the first 

network service software component includes a reverse firewall software 
component for dropping a packet from a first application software 
component on a first wireless device in the wireless local area network. 

According to an embodiment of the present invention, the first 
10 network service software component includes a flashing software 
component for providing a flashing image to a first wireless device, in the 
wireless local area network, for updating a first wireless device 
capability. 

According to an embodiment of the present invention, the first 
15 networks service software component includes a flashing software 
component for providing a flash image to a wireless device, in the 
wireless local area network, for adding a first wireless device capability. 

According to an embodiment of the present invention, the first 
network service software component is a message software component 
20 for providing a message between a first wireless device and the second 
wireless device in the wireless local area network. 

According to an embodiment of the present invention, the first 
network service software component is a service level enforcement 
software component for limiting and amount of packets transferred from 
25 a first wireless device in the wireless local area network to the wide area 
network during a period of time. 

According to an embodiment of the present invention, the first 
network service software component is a Bluetooth™ LAN access profile 
software component. 
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According to an embodiment of the present invention, the first 
network service software component is a dial-up software component. 

According to an embodiment of the present invention, the first 
network service software component is a virtual dial-up software 
5 component for providing packet switching in response to a circuit 
switching signal. 

According to an embodiment of the present invention, a system 
for providing communication between a wide area network and a 
wireless local area network is provided. The system comprises a hand- 

10 held wireless device having a cellular transceiver for communicating with 
the wide area network. The hand-held device has a storage device for 
storing a routing software component for transferring a plurality of 
packets between the wide area network and the wireless local area 
network, wherein the hand-held wireless device has a wide area network 

15 address. A first wireless device has a 2.4 GHZ transceiver for 
transferring a first packet in the plurality of packets to the hand-held 
wireless device, wherein the first wireless device has a first local area 
network address. 

According to an embodiment of the present invention, the first 

20 wireless device is selected from a group consisting of a desktop 
computer, a laptop computer, a personal digital assistant, a headset, a 
pager, a printer, a watch, a digital camera and an equivalent. 

According to an embodiment of the present invention, the hand- 
held wireless device is a cellular telephone using a Global System for 

25 Mobile Communications ("GSM") protocol, Code Division Multiple 
Access ("CDMA") protocol, Universal Mobile Telecommunications 
Systems ("UMTS") protocol or Time Division Multiple Access ("TDMA") 
protocol. 

According to still another embodiment of the present invention, 
30 the system comprises a second wireless device having a 2.4 GHZ 
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transceiver for transferring a second packet in the plurality of packets to 
the hand-held wireless device, wherein the second wireless device has a 
second local area network address. 

According to another embodiment of the present invention, an 
5 article of manufacture, including a computer readable medium, is 
provided. The computer readable medium comprises a routing software 
component of translating between a wide area network address and a 
local area network address. An interface software component allows a 
network service software component to be added. A short- range radio 

10 software component provides a short-range radio signal in a wireless 
local area network. A cellular software component provides a 
communication signal in a cellular network. 

According to still another embodiment of the present invention, a 
managing processing device in a first wide area network is coupled to a 

15 hand-held device having a routing software component for transferring a 
plurality of packets between the first wide area network and the local 
area network. A device is coupled to the hand-held device and is in the 
local area network. The device transfers a first packet in the plurality of 
packets to the hand-held device. 

20 According to another embodiment of the present invention, a 

device has an application, and the managing processing device has a 
manager software component, for accessing the application. The 
application may be a ring tone application or a phone book application. 
According to another embodiment of the present invention, a 

25 microrouter software component stored on a first device runs an 
application on a second device in a local area network. 

According to another embodiment of the present invention, the 
hand-held device includes a bridge software component for transferring 
a plurality of packets having an IP destination address from the wide 

30 area network to the local area network. 
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Other aspects and advantages of the present invention can be 
seen upon review of the figures, the detailed description, and the claims 
that follow. 

BRIEF DESCRIPTION OF THE FIGURES 

5 Fig. 1 illustrates a system according to an embodiment of the 

present invention. 

Fig. 2 illustrates thin terminals and a wireless device according to 
an embodiment of the present invention. 

Figs. 3a-b are hardware block diagrams of a wireless device and 
10 wireless hand-held device according to an embodiment of the present 
invention. 

Figs. 4 and 5 are software block diagrams for a wireless device 
according to an embodiment of the present invention. 

Fig. 6 is a software block diagram of manager software in 
15 manager server 102 illustrated in Fig. 1 according to an embodiment of 
the present invention. 

DETAILED DESCRIPTION 
I. System Overview 

20 The following description and claims relate to a system, device 

and computer readable medium that monitors and reconfigures a LAN 
by an operator. In an embodiment of the present invention, a 
telecommunications operator in a WAN monitors and manages devices 
and/or applications in a LAN communicating with a wireless device, such 

25 as a cellular telephone. In an embodiment of the present invention, a 
telecommunication operator, by way of a manager server, adds LAN 
network services to a microrouter in a cellular telephone without user 
intervention. 
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In an embodiment of the present invention, a LAN is a network of 
processing devices, such as a personal computer or printer, that span a 
relatively small physical area. In an embodiment of the present 
invention, each processing device in a LAN has its own processing unit 
5 that executes a software component stored on the processing device 
memory, but also may access data and devices on the LAN. In an 
embodiment of the present invention, an Ethernet couples processing 
devices in a LAN. In an alternate embodiment, electromagnetic signals 
and wires couple processing devices in a LAN, singly or in combination. 
10 In an embodiment of the present invention, a WAN includes 

multiple LANs connected over a relatively large distance. Telephone 
lines and electromagnetic signals, singly or in combination, couple the 
LANs in a WAN. 

Fig. 1 illustrates system 100 according to an embodiment of the 
15 present invention. System 100 includes terminals 107 coupled to 
wireless device 106. In an embodiment of the present invention, device 
106 and one or more terminals 107 communicate to form a LAN 116. In 
an embodiment of the present invention, terminals 107 are coupled to 
device 106 by short-range radio signals 110 to form LAN 116. In an 
20 embodiment of the present invention, some or all of terminals 107 may 
have wired connections. In an embodiment of the present invention, 
terminals 107 are a desktop computer, a laptop computer, a personal 
digital assistant, a headset, a pager, a printer, a watch, a thin terminal, a 
digital camera or an equivalent. In an embodiment of the present 
25 invention, terminals 107 include a Bluetooth™ 2.4 GHz 
transceiver/receiver. Likewise, device 106 includes a Bluetooth™ 2.4 
GHZ transceiver/receiver. In an alternate embodiment of the present 
invention, a Bluetooth™ 5.7 GHZ transceiver/receiver is used. Device 
106 and terminals 107 hardware is illustrated in Figs 3a-b. 
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ln alternate embodiments of the present invention, other local 
wireless technologies, such as 802.11 or HomeRF signals, are used to 
communicate between device 106 and terminals 107. 

In an embodiment of the present invention, WAN 105 is coupled 
5 to device 106. In an embodiment of the present invention, WAN 105 
includes a cellular network transmitting and receiving cellular signals 
111. In an embodiment of the present invention, cellular signals 111 are 
transmitted using a protocol, such as a Global System for Mobile 
communications ("GSM") protocol. In alternate embodiments, a Code 
10 Division Multiple Access ("CDMA"), CDMA 2000 or Time Division 
Multiple Access ("TDM A"), or General Packet Radio Service ("GPRS") 
protocol is used. 

In an embodiment of the present invention, WAN 105, carrier 
backbone 104, and manager server 102 is, singly or in combination, a 

15 telecommunication network that is managed and monitored by operator 
115. In an embodiment of the present invention, IP packets are 
transferred between the components illustrated in Fig. 1. In alternate 
embodiments of the present invention, other packet types are 
transferred between the components illustrated in Fig. 1 . 

20 In an embodiment of the present invention, a network described 

herein is an IP public or private network, such as a corporate secured 
network using a Virtual Private Network ("VPN"). 

In an alternate embodiment of the present invention, device 106 
is coupled to a landline network by an Ethernet, Digital Subscriber Line 

25 ("DSL"), or cable modem connection, singly or in combination. 

In an embodiment of the present invention, device 106 is coupled 
to a desktop computer coupled to WAN 105 by a landline connection. In 
an embodiment of the present invention, device 106 is coupled to the 
desktop computer by short-range radio signals. 
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In an embodiment of the present invention, device 106 is a 
cellular handset or telephone. In an alternate embodiment of the present 
invention, device 106 is a cellular enabled PDA, wireless modem and/or 
wireless laptop computer. 
5 In an embodiment of the present invention, WAN 105 is coupled 

to a wireless carrier internal network or carrier backbone 104. In an 
embodiment of the present invention, manager server 102 is coupled to 
carrier backbone 104. In an alternate embodiment of the present 
invention, carrier backbone 104 is coupled to Internet 103. Server 101 is 

10 coupled to Internet 103. In an embodiment of the present invention, 
servers 101 and 102 provide information, such as web pages or 
application software components, to terminals 107 by way of device 106. 
In an embodiment of the present invention, manager server 102 
provides a microrouter 404 and/or network service plug-ins 406a-k to 

15 device 106, as described below. Further, manager server 102, monitors 
applications and terminals in a LAN 116. In an embodiment of the 
present invention, terminals 107 share services and communicate by 
way of device 106. 

20 II. Hand-held Device/Terminal Hardware 

Fig. 2 illustrates embodiments of terminals 107 and device 106. 
In an embodiment of the present invention, there are two types of 
terminals: 1) smart terminals and 2) thin terminals. Smart terminals have 
a relatively powerful processing unit, operating system and applications. 

25 Their main needs from a LAN are access to a WAN through TCP/IP and 
other network services such as storage and execution. For example, a 
computer notebook and PDA are smart terminals. Thin terminals have a 
relatively low power processing unit and operating system. They are 
mainly used as peripherals to an application server in a LAN 116 and 

30 their main task is user interaction, rendering output for a user and 
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providing an application server with a user's input. For example, a watch 
or a messaging terminal are thin terminals. 

Fig. 2 illustrates thin terminals. Voice terminal 204 includes a 
display 204b and a retractable keypad 204a. Messaging Terminal 203 is 
5 illustrated in a closed position with a hinge 203a used to open and close 
terminal 203. Terminal 203 also includes a miniature QWERTY 
keyboard and display when opened. Device 201 includes clip 202 for a 
belt. 

In an embodiment, device 201 is also illustrated in Fig. 2. 

10 Fig. 3a illustrates a hardware block diagram of device 106 in an 

embodiment of the present invention. Device 106 includes both internal 
and removable memory. In particular, device 106 includes internal 
FLASH (or Electrically Erasable Programmable Read-Only Memory 
("EEPROM") and static Random Access Memory ("SRAM")) 302 and 

15 303, respectively. Removable FLASH memory 304 is also used in an 
embodiment of the present invention. Memories 302, 303, and 304 are 
coupled to bus 305. In an embodiment of the present invention, bus 305 
is an address and data bus. Application processor 301 is likewise 
coupled to bus 305. In an embodiment of the present invention, 

20 processor 301 is a 32-bit processor. 

Bluetooth™ processor 307 is also coupled to bus 305. 
Bluetooth™ RF circuit 309 is coupled to Bluetooth™ processor 307 and 
antenna 313. Processor 307, RF circuit 309 and antenna 313 transceive 
and receive short-range radio signals to and from terminals 107, 

25 illustrated in Fig. 1, or device 350 illustrated in Fig. 3b. 

Cellular, such as GSM, signals are transmitted and received 
using digital circuit 306, analog circuit 308, transceiver 310, receiver 31 1 
and antenna 312. Digital circuit 306 is coupled to bus 305. In alternate 
embodiments, device 106 includes a display, a speaker, a microphone, 

30 a keypad and a touchscreen, singly or in combination. 
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Fig. 3b illustrates device 350 that is a hand-held device in an 
embodiment of the present invention. Device 350, in an embodiment of 
the present invention, is one of the terminals 107 illustrated in Fig. 1. 
Similar to device 106, device 350 includes SRAM and FLASH memory 
5 351 and 352, respectively. Memories 351 and 352 are coupled to bus 
357. In an embodiment of the present invention, bus 357 is an address 
and data bus. Keypad 353 is also coupled to bus 357. Short-range 
radio signals are transmitted and received using Bluetooth™ processor 
354 and Bluetooth™ RF circuit 355. Antenna 356 is coupled to 

10 Bluetooth™ RF circuit 355. In an embodiment of the present invention, 
antenna 356 transmits and receives ' short-range radio signals from 
device 300. In alternate embodiments, device 350 includes a display, a 
speaker, a microphone, a keypad and a touchscreen, singly or in 
combination. 

15 ML Software 

Fig. 4 illustrates a software architecture 500 for device 106 
illustrated in Fig. 3a according to an embodiment of the present 
invention. Software 500 is stored in FLASH memory 302. In an 
embodiment of the present invention, software components referenced 

20 in Figs. 4-6 represent a software program, a software object, a software 
function, a software subroutine, a software method, a software instance, 
and a code fragment, singly or in combination. In an alternate 
embodiment, functions performed by software components illustrated in 
Figs. 4-6 are carried out completely or partially by hardware. 

25 In an embodiment of the present invention, software 500, or 

components of software 500, is stored in an article of manufacture, such 
as a computer readable medium. For example, software 500 is stored in 
a magnetic hard disk, an optical disk, a floppy disk, CD-ROM (Compact 
Disk Read-Only Memory), RAM (Random Access Memory), ROM 

30 (Read-Only Memory), or other readable or writeable data storage 
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technologies, singly or in combination. In yet another embodiment, 
software 500, or components thereof, is downloaded from manager 
server 102 illustrated in Fig. 1. 

Software 500 includes telecommunication software or physical 
5 layer protocol stacks, in particular cellular communications software 503 
and short-range radio communications software 502. In an embodiment, 
communication software 503 is a GPRS baseband software component 
used with processor 306 to transmit and receive cellular signals. In an 
embodiment, communication software 502 is a Bluetooth™ baseband 

10 software component used with processor 307 to transmit and receive 
short-range radio signals. Other telecommunication software may be 
used as illustrated by other basebands 501 . 

In an embodiment of the present invention, operating system 403 
is used to communicate with telecommunications software 502 and 503. 

15 In an embodiment of the present invention, operating system 403 is a 
Linux operating system, EPOC operating system available from 
Symbian software of London, United Kingdom or a PocketPC or a 
Stinger operating system available from Microsoft® Corporation of 
Redmond, Washington or Nucleus operating system, available from 

20 Accelerated Technology, Inc. of Mobile, Alabama. Operating system 
403 manages hardware and enables execution space for device 
software components. 

Media abstraction layer 504 allows operating system 403 to 
communicate with basebands 503, 502 and 501, respectively. Media 

25 abstraction layer 504 and other abstraction layers, described herein, 
translate a particular communication protocol, such as GPRS, into a 
standard command set used by a device and/or terminal. The purpose of 
an abstraction layer is to isolate the physical stacks from the rest of the 
device software components. This enables future usage of different 
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physical stacks without changing any of the upper layer software and 
allows the device software to work with any communication protocol. 

Furthermore, Graphics User Interface ("GUI") 407 is provided to 
allow a user-friendly interface. 
5 Microrouter 404 and network service plug-in 406 enables an IP 

based network or enhanced IP based network, respectfully. 
A. Microrouter 
Microrouter 404 enables an IP based network between device 
106 and terminals 107. In an embodiment of the present invention, each 

10 terminal can leverage the existing IP protocol, exchange information with 
other terminals and gain access to a WAN through microrouter 404. 
Extended network services, such as network service plug-ins 406 may 
be added to microrouter 404. In an embodiment, manager server 102, 
installs microrouter 404 and network service plug-ins 406 on device 106. 

15 Fig. 5 illustrates software components of microrouter 404. In an 

embodiment of the present invention, routing component 550, 
Bluetooth™ LAN Access Profile component 551 , Point-to-Point Protocol 
("PPP") component 552 and Network Address Translator ("NAT") 
component 553 are included in microurouter 404. In an alternate 

20 embodiment, other components, such as packet filters 562, Bluetooth™ 
filters 560, scheduling 563 and IP client 561 are included in microrouter 
404. In still another embodiment, microrouter 404 includes hooks 590 
for adding network services plug-ins 406. 

1. Microrouter services 

25 In an embodiment, microrouter 404 services include software 

components for an IP LAN that has access to a WAN. In an 
embodiment, the software components included in a microrouter 404 are 
described below. 
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a. Bluetooth™ Access Profile ("BAP") 
BAP software component 551 enables Bluetooth™ terminals to 
gain access to a LAN 116 and a WAN by using an IP protocol. 

In an embodiment of the present invention, BAP 551 includes 
5 implementation of two Bluetooth™ usage profiles such as: 1) 
Bluetooth™ LAN Access Profile software and 2) Bluetooth™ Dial-Up 
Profile software. 

Bluetooth™ LAN Access Profile software component allows a 
LAN Access client in a terminal to obtain an IP address and use the IP 

10 address in order to gain connectivity to other LAN terminals or to a 
WAN, behaving as if they were on a LAN. 

Bluetooth™ Dial-Up Profile software component enables a 
terminal to dial-up to any termination number and get IP services from 
that termination. In addition, a Bluetooth™ Dial-Up Profile ("DUP") 

15 software component emulates termination in device 106. In an 
embodiment, microrouter 404 has either a Bluetooth™ LAN Access 
Profile software component or a Bluetooth™ Dial-Up Profile software 
component. In an alternate embodiment, microrouter 404 includes both 
Profile software components. In a Bluetooth™ Dial-Up Profile software 

20 component mode, a terminal dials a predefined number, for example 
999, for which microrouter 404 will not actually dial the number over a 
cellular network, but emulates as if the number was dialed and a modem 
answered the call. Microrouter 404 will provide the terminal with an IP 
address and access to WAN 105. From the terminal's point of view it is 

25 as if the terminal dialed a number 999 to a modem and received an IP 
service from that modem, but in reality the terminal used DUP to obtain 
packet switching access to WAN 105 and the call was actually 
terminated at microrouter 404. 
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b. Routing 

Routing software component 550 is responsible for transferring IP 
packets either in a LAN or toward a WAN. In a LAN 116, Routing 550 
handles broadcasting IP packets and transferring IP packets between 
5 terminals. Routing 550 is also responsible for LAN IP Broadcast 
emulation. 

Routing component 550 is responsible for IP packet 
queuing/dropping. A IP packet dropping software component is used for 
reducing congestion caused by having more than one terminal 

10 connected simultaneously. In an embodiment of the present invention, 
routing 550 includes a queuing software component, Quality of Service 
software component or equivalent for queuing IP packets. Likewise, 
routing component 550 includes a dropping software component that is 
configured by manager server 102, a user or any other remote entity. In 

15 an embodiment of the present invention, manager server 102 defines 
and loads an IP packet queuing/dropping software component. An 
operator 115 will be able to define a particular queuing/dropping 
software component that is suitable for a particular LAN 1 16 or user. A 
user will have a better LAN 116, and thus a better user experience, 

20 without having to configure or monitor a LAN 116. 

In an alternate embodiment of the present invention, routing 
software component 550 is a bridge software component for transferring 
an IP address. 

c. PPP 

25 In an embodiment of the present invention, microrouter 404 

includes a PPP software component 552, such as a PPP server that is 
the termination for a LAN access profile software component. A PPP 
server provides IP network information, such as an IP address, DNS 
address or the like, to a terminal. 
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d. NAT 

NAT software component 553 is used because 1) only one public 
IP address is typically made available to a cellular telephone and 2) in 
order to conserve public IP addresses provided by an operator. In an 
5 embodiment of the present invention, WAN 105, and in particular, a 
cellular packet switching network provides device 106 with one public IP 
address. A LAN 116 however includes more than one participating 
terminal. In order to provide IP addresses to all terminals 107, private 
LAN IP addresses will be used for LAN terminals while NAT 553 is 
10 responsible for translations between private LAN IP addresses and 
public WAN addresses, and vice versa. 

2. Hooks to Extended Network Service Plug-Ins 
In an embodiment of the present invention, microrouter 404 
includes hooks 590 allowing for the extension of microrouter 404 
15 networking services, such as plug-ins 406. In an embodiment of the 
present invention, hooks 590 are application program interfaces ("API") 
for plug-ins 406. 

In an embodiment of the present invention, Microrouter 404 is 
programmed to have only basic network abilities and a very low 

20 footprint, or in other words require very little memory, for example 100K 
bytes, in order to be stored in a device 106, such as a cellular telephone. 
However, in some instances more network services will be needed. 
Further, operators may want the ability to add and sell network services 
after the device 106 is sold and in operation without user intervention. A 

25 user may be less likely to purchase a network service if the user has to 
return device 106 to the manufacture or inconvenient site. 

For these and other reasons, the microrouter 404 includes hooks 
590 that enable plug-ins 406 to be implemented in an embodiment of the 
present invention. This plug-in capability does not define a full execution 

30 environment but defines a small framework for implementing code, 
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which can plug-in and extend microrouter 404 network services. In an 
embodiment of the present invention, hooks 590 is not a user application 
framework, plug-in code abilities are limited and serves only as an 
extension to network services. 
5 Plug-ins 406 are fully activated by microrouter 404, which has full 

control over them in an embodiment of the present invention. In some 
sense, plug-ins are like a Dynamic Link Library ("DLL") that have a 
predetermined set of functions that a microrouter can call in order for 
them to realize the needed functionality. 

10 Below describes software components included in hooks 590 for 

implementing plug-ins 406 according to an embodiment of the present 
invention. In an alternate embodiment, other software components are 
included or replace illustrated software components in hooks 590. For 
example, software components implementing functionality used by all 

15 plug-ins 406, such as hooks for centralized configuration and backend 
connectivity, are included in hooks 590 in an embodiment of the present 
invention. These included software components in hooks 590 will save 
resources and allow for efficient operation. 

a. Packet Filters 

20 Packet filters software component 562 allows plug-ins 406 to 

process IP packets going either internally in a LAN 116 or externally to 
and from a WAN. By enabling plug-ins 406 to process IP packets and 
change any part of a packet, drop a packet or generate more packets, 
microrouter 404 is able to include multiple other added extended 

25 network services. For example, microrouter 404 is able to include a 
VPN, a firewall, tag packets, monitor packets and other extended 
network services described below. In an embodiment of the present 
invention, a packet filters 562 is a data path for transferring IP packets 
that are accessible by plug-ins 406. 
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b. Bluetooth™ Filters 

Bluetooth™ filters software component 560 enables plug-ins 406 
to process Bluetooth™ information. In an embodiment, Bluetooth™ 
filters 560 processes a pairing request event and provides a PIN 
5 number. In an embodiment of the present invention, Bluetooth™ filters 
560 enable added network services such as PIN management, denying 
access to a LAN 116 from a terminal, authenticating a terminal, pairing 
through a interactive voice response ("IVR") system or the Internet. In an 
embodiment of the present invention, a Bluetooth™ filters 560 is a data 
10 path for transferring Bluetooth™ information that is accessible by plug- 
ins 406. 

c. Scheduling 

In order for plug-ins 406 to be able to generate events, traffic or 
do periodic tasks, a scheduling software component 563 enables a plug- 
15 in to receive a callback periodically or when required by the plug-in. For 
example, Scheduling 563 enables a statistics plug-in to send statistic 
information on terminal and application usage every X hours or 
calculated average traffic at a selected terminal. 

d. IP Client 

20 In an embodiment of the present invention, IP Client 561 makes 

available IP services to plug-ins 406 so a plug-in can obtain an IP 
address, send IP packets and/or receive IP packets. Thus, IP Client 
software component 561 enables a plug-in to obtain a private IP address 
from microrouter 404 and connect to a backend server, such as 

25 manager server 102. An IP client 561 plug-in can implement a TCP/IP 
stack or User Datagram Protocol ("UDP"). In an embodiment of the 
present invention, IP Client plug-in 561 uses all necessary microrouter 
404 network services, such as packet filters 562 or NAT 553. From a 
microrouter 404 perspective, an IP Client 561 is treated like any other 

30 terminal on a LAN 1 1 6. 
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3. Plug-In Loader 

A plug-in can be attached to a microrouter 404 during or after 
manufacturing. In an embodiment of the present invention, a plug-in is 
stored or programmed in device 106 before shipping from a 
5 manufacture. Alternately, a plug-in is downloaded from manager server 
102 at run-time over WAN 105. 

A plug-in loader software component 554, as illustrated in Fig. 5, 
is responsible for loading plug-ins 406, programming of plug-ins 406 and 
notification of newly available plug-in 406 to microrouter 404 in an 
10 embodiment of the present invention. 

In an embodiment of the present invention, plug-in loader 554 will 
use operating system 403 capabilities for programming a file system and 
access of plug-ins 406. In an alternate embodiment of the present 
invention, plug-in loader 554 uses a plug-in directory in a dedicated 
15 memory space of device106. 

4. Microrouter Extended Service Plug-Ins 

Below describes microrouter 404 extended service plug-ins 406 in 
an embodiment of the present invention. In various embodiments of the 
present invention, one or more of plug-ins 406 are attached to 
20 microrouter 404. In alternate embodiments, other plug-ins are attached 
to microrouter 404. In an embodiment of the present invention, a device 
manufacturer, terminal manufacturer, an operator 115 and/or other third 
party provides a plug-in. 

a. Bluetooth™ Terminal Pairing 
25 Management CBTPM") 

BTPM software component plug-in 406a is responsible for PIN 
management and authenticating terminals for participating in a LAN 116. 
BTPM 406a allows an operator 115 to control which terminal can 
30 connect to a LAN 116. For example, an operator 115 can deny a 
terminal from pairing to a LAN 1 16, or can approve a terminal for pairing. 
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ln an embodiment of the present invention, pairing is done over an IVR, 
the Internet and/or by a user. 

b. VPN 

VPN software component plug-in 406b enables a secure link to a 
5 network, such as a private corporate network. VPN enables terminals to 
connect to a corporate file server, exchange server or an equivalent. 
VPN 406b uses packet filters 562 in order to identify packets that are 
routed to a corporate LAN IP subnet. In an embodiment of the present 
invention, VPN 406b then encrypts and tunnels the identified IP packets. 
10 c. Firewall 

Firewall software component plug-in 406c protects a LAN 116 
from intruders and hackers. In an embodiment of the present invention, 
Firewall 406c uses packet filters 562 for identifying IP packets from non- 
authorized sources and IP packets that are sent to non-authorized 
15 servers. In an embodiment of the present invention, firewall 406c 
enables Uniform Resource Locator ("URL") filtering. 

d. Statistics 

In an embodiment of the present invention, statistics software 
component plug-in 406d collects usage profiles and statistics on 1) 
20 which terminal in a LAN 1 16 is used, 2) how much traffic is generated by 
each terminal, and 3) by each application. Statistics 406d enables an 
operator 1 15 to promote used terminals and build billing schemes. 

e. Link Optimizations 

Implementing direct TCP/IP and Internet application protocols 
25 over WAN 105, and in particular a wireless network, produces poor 
performance because of low bandwidth, transmission delays and high 
data error rates. In order to solve the poor performance but still enable 
terminals to use standard TCP/IP, a Link Optimization software 
component plug-in 406e is provided. Link Optimization 406e traps all 
30 TCP/IP and specific Internet application protocols, such as Simple Mail 
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Transfer Protocol ("SMTP") and Hypertext Transfer Protocol ("HTTP"), 
and converts the protocol to an optimized protocol. Link Optimization 
406e then sends the converted packets to a backend server, such as 
manager server 102, which than deconverts the packets and sends 
5 them onto the Internet. In an embodiment of the present invention, 
terminals and users are not aware of using Link Optimization 406e. 

f. Reverse firewall 
As opposed to a typical LAN firewall that protects a LAN 116 from 
intruders and hackers from the Internet or another network, a Reverse 

10 Firewall ("RFW") software component plug-in 406g protects an operator 
115 or another network from terminals and applications on a LAN 116 
generating traffic toward those networks. RFW 406g enables an 
operator 115 or another entity to define and enforce usage policies for 
applications/terminals on a LAN 116. RFW 406g prevents unnecessary 

15 costly transmission costs. Enforcement of usage policies at the LAN 
level (i.e. at device 106) prevents expensive packets from going through 
a cellular network that will be eventually dropped. Further, packets that 
may be later dropped do not use the limited cellular transmission 
bandwidth. 

20 In an embodiment of the present invention, RFW 406g is attached 

to a cellular handset that has Bluetooth™ capability for implementing a 
LAN 116 and GSM/GPRS for cellular access to a WAN 105 (i.e. Internet 
or any other network). RFW 406g is programmed to drop packets based 
on the originating terminal, originating application/terminal pair or original 

25 application. For example, if a user has a PDA and a Notebook, an 
operator 115 can configure for File Transfer Protocol ("FTP") packets 
from the PDA to be dropped if FTP from a PDA is not allowed, or for 
example to drop video streaming packets originated from the Notebook if 
video streaming is something the operator 115 does not allow. 
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Another example includes blocking Notebook usage of such 
software as Napster in order to avoid cellular unintended usage by users 
and associated cost. 

g. Terminal Programming over Bluetooth™ 
5 ("TPB") 

TPB software component plug-in 406f enables the programming 
of terminals 107 over Bluetooth™ and over a cellular network. In an 
embodiment of the present invention, programming a terminal is 

10 accomplished by "flashing" or programming EEPROM memory in a 
terminal. An operator 115 or manufacturer can transfer a flash image to 
be flashed to device 106 having microrouter 404, and terminals 107 to 
be flashed. TPB 406f communicates with a Flashing software 
component in a terminal to 1) initiate the flashing process, 2) 

15 authenticate the flash image and 3) secure the flashing process. 

In an embodiment of the present invention, flashing is done by 
transferring a full flash image. Alternatively, if there is not enough 
memory for the full flash image in device 106, the flash image is 
transferred block by block to eventually be flashed. 

20 TPB 406f enables customizing a terminal, fixing software running 

on a terminal, and adding applications and/or improvements. 

h. Short Message System ("SMS") Plug-In 
SMS software component plug-in 406h allows terminals 107 to 

send messages between each other in a LAN 116. In an embodiment of 
25 the present invention, a terminal is a Messaging Terminal that enables 

Instant Messaging over IP. In an alternate embodiment of the present 

invention, SMS 406h enables standard legacy SMS or Instant 

Messaging over SMS. 

In an embodiment of the present invention, SMS 406h is an SMS 
30 server for terminals 107 and an SMS termination for device 106. In this 

way, a protocol will be defined that enables each terminal to send a 
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packet to SMS 406h with a destination device phone number + message 

text. SMS 406h then send the SMS message to a cellular network. 

SMS 406h also serves as an SMS receiver in an embodiment of 

the present invention. A terminal can inquire SMS 406h for received 

5 SMS messages and fetch those messages. In still another embodiment 

of the present invention, a terminal will also receive an IP broadcast 

message each time an SMS message is received by device 106. 

i. Service Level Verification ("SLV"V 
Enforcement fSLE") 
10 SLV/SLE software component plug-in 406i enables an operator 

115 to verify and enforce service level agreements with users. If an 

operator 115 wants to enforce service levels, such as specifically limiting 

the amount of traffic over a cellular network, SLV/SLE 406i is added in 

order to avoid usage of expensive airtime. 

15 In an embodiment of the present invention, SLV/SLE 406i allows 

a user to generate an unlimited amount of cellular traffic from device 106 
during the night but a limited amount during the day. So during the day, 
if the limited amount is exceeded no more traffic can be generated from 
device 106 and packets are dropped by SLV/SLE 406L Similar policies 

20 may likewise be enforced. SLV/SLE 406i also identifies and notifies 
operator 115 of missed cellular network usage by a particular user due 
to enforcement in an embodiment of the present invention. 

j. Device Resources Access ("DRA") 
DRA software component plug-in 406j enables terminals to gain 

25 access (according to defined restrictions) to device 106 resources. This 
enables a terminal to implement a Device Resources Access protocol 
over IP in order to gain access to any of the following resources: 1) 
phone book, 2) play a ring tone, 3) initiate a call, 4) user interface, or 5) 
other device resources. 
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DRA 406j enables a terminal to read/modify/add phone book 
entries in a phone book stored on device 106. In a preferred 
embodiment, a vCard format is used to exchange entry information 
between device 106 and terminals 107. This enables a better consistent 
5 experience for users. For example, DRA 406j provides a user immediate 
access to a device 106 phone book entries for sending a message from 
a messaging terminal without having to type the contact information from 
the phone book. 

DRA 406j enables a user to be alerted by using a device 106 ring 
10 buzzer. Thus, a terminal in LAN 116 can use a device 106 ring buzzer 
for alerting a user. 

DRA 406j enables a terminal, such as a PDA or an Outlook 
application on a notebook computer, to initiate a telephone call at device 
106. In an embodiment of the present invention, clicking a phone icon 
15 near a phone number on a notebook display initiates a cellular telephone 
call. 

Likewise, DRA 406j enables a terminal to interact with a user 
through device 106 menus and input components. 

k. Terminal Management/Monitoring ("MNG") 
20 MNG software component plug-in 406k enables management, 

configuration and monitoring of terminals 107 in an embodiment of the 
present invention. Instead of each terminal implementing a proprietary 
management protocol and console, each terminal exposes a "registry" of 
parameters and MNG 406k implements a protocol enabling a managing 
25 server 102 to browse this registry, get values and set values. 
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IV. Usage Scenarios 

A. PDA Synchronizes against the Corporate Exchange 
Server 

5 In this scenario, a user is a traveling professional who has a PDA 

and needs to synchronize it against a corporate exchange server while 
on the road. This synchronization needs to be done securely as the only 
way to enter the corporate network is via a certified and Information 
Technology ("IT") manager approved VPN. 

10 The user also has a cellular telephone having a microrouter 404 

and VPN client 406j, which the IT manager installed. The IT manager 
used the remote management capabilities of the cellular telephone in 
order to configure a VPN to connect to the corporate network, as well as 
configured the firewall to block Internet access while the VPN is in use. 

15 The user is totally unaware of the VPN and its configurations. 

As the user turns on the PDA, which is a Bluetooth™ equipped 
PDA with a LAN Access profile implementation, the PDA connects to the 
cellular telephone via the BAP 551 utilizing Bluetooth™. The PDA 
receives a private IP address. 

20 The user loads the PDA synchronization software, which is 

configured to synchronize against the corporate exchange server. When 
hitting the "Synchronize" button, the PDA opens a TCP connection to the 
IP address of the corporate network. 

The IP packets travel across the Bluetooth™ air interface to the 

25 cellular telephone using a PPP protocol and PPP 552. When reaching 
the cellular telephone, the packets go through NAT 553 and the private 
IP address is translated to a public IP address. The public IP address 
goes to VPN 406f, which identifies the destination as the corporate LAN. 
VPN 406f packages the packet over an Internet tunnel, encrypts and 

30 signs it. The packet is then sent through the cellular air interface and the 
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Internet, reaching the corporate VPN and exchange servers. The PDA is 
totally unaware of this process. 

B. PDA Synchronizes against a Notebook on the LAN 
In this scenario, the user, as described above, needs to 

5 synchronize the PDA with a notebook computer. 

The notebook has a Bluetooth™ card with a LAN access profile. 
Once the notebook is turned on, it connects to the users cellular 
telephone having microrouter 404 and receives a private IP address. 

The user runs the same synchronization software on his PDA, 
10 only this time chooses to synchronize with the notebook. 

When hitting the "Synchronize" button on the PDA, the PDA 
opens a TCP connection to the notebook's IP address. 

An IP packet travels, from the PDA, through the Bluetooth™ 
interface over a PPP protocol and reaches routing 550 in microrouter 
15 404 that identifies the packet destined to a private IP address of the 
notebook. The IP packet is then sent to the notebook through the 
notebook's Bluetooth™ interface over a PPP protocol. 

C. Web Pad Browsing the Internet 

In this scenario, a user has a Web Pad equipped with a 
20 Bluetooth™ interface with a LAN access profile. The Web Pad is 
connected to the cellular telephone having microrouter 404, which is in 
the users bag, and receives a private IP address through the LAN 
access profile. The Web Pad also has a web browser. 

The user pulls out his Web Pad, goes to a URL line of the 
25 browser and types http://www.iximobile.com. The web browser first has 
to translate the name www.iximobile.com into a public IP address. This 
is done using a Domain Naming Service ("DNS") protocol. The Web Pad 
already received the private IP address of a DNS plug-in when it 
connected to the cellular telephone. The Web Pad sends a resolve 
30 request to the DNS plug-in software component in microrouter 404. DNS 



WO 03/017705 



PCT/US02/23946 



-29- 

software component looks at its cache for the name. If the name is not 
available, the DNS plug-in software component goes to the next DNS on 
a WAN 105 to get the public IP address of the name. In both cases, the 
DNS eventually gets the public IP address for www.iximobile.com and 
5 sends the reply back to the Web Pad. In an embodiment of the present 
invention, a DNS software component is a plug-in 406 or a hook 590. 

When the Web Pad receives the public IP address of the web 
site, it opens a TCP connection at port 80 of that public IP address in 
order to implement the HTTP protocol and get the HTML page to 
10 display. 

V. Manager Server 

In an embodiment of the present invention, Manager server 107, 
illustrated in Fig. 1, includes Manager software component 700 

15 illustrated in Fig. 6. In an embodiment of the present invention, manager 
software 700 is used to load microrouter 404 and plug-ins 406 into 
device 106. In an additional embodiment of the present invention, 
manager software 700 is used to manage, configure and collect data 
from LAN 116. In still another embodiment of the present invention, 

20 manager software 700 is not used with LAN 106. 

Manager server 102 includes a Proliant server available from 
Compaq® Computer Corporation of Houston Texas having a Windows® 
2000 operating system available from Microsoft® Corporation in an 
embodiment of the present invention. 

25 In an embodiment of the present invention, manager 700 has an 

IP interface in order to gain access to microrouter 404 and access a 
device notification service, such as SMS 406h. Manager 700 can be 
installed on any network that has IP connectivity to microrouter 404. 
Manager 700 can be installed by a service provider on Internet 103, or 

30 by an operator 1 15 on its IP backend network having server 102. 
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Manager 700 includes two software components, network 
manager 701 and extended network manager 702, in an embodiment of 
the present invention. 

Network manager 701 is responsible for, but not limited to, the 
5 following functions: 1) configuring an IP parameter, such as IP domain 
range or policies, 2) configuring plug-ins 406 currently installed and 
executed, 3) enabling/disabling an installed plug-ins 406, 4) loading new 
plug-ins in microrouter 404, and 5) removing plug-ins 406 from 
microrouter 404. 

10 Network extended manager 702 is responsible for, but not limited 

to, the following functions: 1) collecting usage profiles for each 
microrouter 404 and each terminal in LAN 116, 2) managing PINs, such 
as denying access to LAN 116 for a particular terminal or approving 
access to LAN 116 for other terminals, 3) managing security, such as 

15 configuring VPN 406b or configuring Firewall 406c, 4) configuring Link 
Optimization 406e, and 5) configuring Quality of Service ("QoS") 
parameters in microrouter 404. 

In an embodiment of the present invention, plug-in manager 
software components 706a-f are stored in manager server 102 and use 

20 network manager software component 701 and/or extended network 
manager software component 702 for accessing and controlling network 
plug-ins 406a-k. For example, a plug-in manager software component 
706d is used to obtain statistics information from statistics plug-in 406d 
in microrouter 404. In an embodiment of the present invention, there is a 

25 corresponding plug-in manager software component in manager 
software 700 for every plug-in software component in microrouter 404. 



30 



VI. Conclusion 

The foregoing description of the preferred embodiments of the 
present invention has been provided for the purposes of illustration and 
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description. It is not intended to be exhaustive or to limit the invention to 
the precise forms disclosed. Obviously, many modifications and 
variations will be apparent to practitioners skilled in the art. The 
embodiments were chosen and described in order to best explain the 
5 principles of the invention and its practical applications, thereby enabling 
others skilled in the art to understand the invention for various 
embodiments and with the various modifications as are suited to the 
particular use contemplated. It is intended that the scope of the 
invention be defined by the following claims and their equivalents. 
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What is claimed is: 

1) A hand-held device for providing communication between 
a wide area network and a wireless local area network, comprising: 
(a) a storage device; 
5 (b) a processor coupled to the storage device; and, 

(c) wherein the storage device stores a router software 
component for transferring a packet between the wide area 
network and the wireless local area network. 

10 2) The hand-held device of claim 1, wherein the packet is an 

Internet Protocol ("IP") packet. 

3) The hand-held device of claim 1, wherein the wide area 
network includes a plurality of public IP addresses and the wireless local 
15 area network includes a plurality of private IP addresses, and wherein 
the router software component translates a first IP address in the 
plurality of public IP addresses to a second IP address in the plurality of 
private IP addresses. 

20 4) The hand-held device of claim 1, wherein the device 

includes a Bluetooth™ processor and a 2.4 GHZ transceiver. 

5) The hand-held device of claim 1 , wherein the wide areas 
network is the Internet. 

25 

6) The hand-held device of claim 1, wherein the wide area 
network includes a cellular network. 

7) The hand-held device of claim 1, wherein the wide area 
30 network includes a corporate network. 
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8) The hand-held device of claim 1, wherein the wide area 
network includes a private IP network. 

5 9) The hand-held device of claim 1 , wherein the wireless local 

area network is a Bluetooth™ wireless local area network. 

10) The hand-held device of claim 1 , wherein the wireless local 
area network is a 802.1 1 wireless local area network. 

10 

11) The hand-held device of claim 1, wherein the router 
software component includes a network address translator ("NAT") 
component for translating between a first wide area network address 
and a first local area network address. 

15 

12) The hand-held device of claim 1, wherein the router 
software component includes a network address port translation 
("NAPT") component for translating between a first wide area network 
address and a first local area network address. 

20 

13) The hand-held device of claim 1, wherein the router 
software component includes a local routing software component for 
routing an IP packet between a first wireless device in the wireless local 
area network and a second wireless device in the wireless local area 

25 network. 

14) The hand-held device of claim 1, wherein the router 
software component includes an interface for adding a first network 
service software component for providing a network service to the 

30 wireless local area network. 
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15) The hand-held device of claim 14, wherein the first network 
service software component is loaded into the storage device from a 
managing processing device in the wide area network. 

5 

16) The hand-held device of claim 14, wherein the first network 
service software component is loaded into the storage device during 
manufacturing of the hand-held device. 

10 17) The hand-held device of claim 14, wherein the first network 

service software component is a pairing management software 
component for determining whether a first wireless device is coupled to 
the wireless local area network, responsive to a signal from the 
managing processing device in the wide area network. 

15 

18) The hand-held device of claim 14, wherein the first network 
service software component is a virtual private network software 
component for establishing a secure link. 

20 19) The hand-held device of claim 14, wherein the first network 

service software component is a firewall software component. 

20) The hand-held device of claim 14, wherein the first network 
service software component is a statistics software component for 

25 collecting usage information of the wireless local area network. 

21) The hand-held device of claim 20, wherein the statistics 
software component collects usage information of a first wireless device 
in the wireless local area network. 

30 
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22) The hand-held device of claim 20, wherein the statistics 
software component collects usage information of an application 
software component in a first wireless device in the wireless local area 
network. 

5 

23) The hand-held device of claim 14, wherein the first network 
service software component includes a link optimization software 
component for converting an IP packet from a first wireless device in the 
wireless local area network to an optimized cellular protocol packet 

10 transferred to a processing device in the wide area network. 

24) The hand-held device of claim 14, wherein the first network 
service software component includes a reverse firewall software 
component for dropping a packet from a first wireless device in the 

15 wireless local area network. 

25) The hand-held device of claim 14, wherein the first network 
service software component includes a reverse firewall software 
component for dropping a packet from a first application software 

20 component on a first wireless device in the wireless local area network. 

26) The hand-held device of claim 14, wherein the first network 
service software component includes a flashing software component for 
providing a flash image to a first wireless device, in the wireless local 

25 area network, for updating a first wireless device capability. 

27) The hand-held device of claim 14, wherein the first network 
service software component includes a flashing software component for 
providing a flash image to a first wireless device, in the wireless local 

30 area network, for repairing a first wireless device capability. 
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28) The hand-held device of claim 14, wherein the first network 
service software component includes a flashing software component for 
providing a flash image to a first wireless device, in the wireless local 

5 area network, for adding a first wireless device capability. 

29) The hand-held device of claim 14, wherein the first network 
service software component is a message software component for 
providing a message between a first wireless device and a second 

10 wireless device in the wireless local area network. 



30) The hand-held device of claim 14, wherein the first network 
service software component is a service level enforcement software 
component for limiting an amount of packets transferred from a first 

15 wireless device in the wireless local area network to the wide area 
network during a period of time. 

31 ) The hand-held device of claim 14, wherein the first network 
service software component is a Bluetooth™ LAN Access Profile 

20 software component. 

32) The hand-held device of claim 14, wherein the first network 
service software component is a Bluetooth™ Dial-Up Profile Software 
component. 

25 

33) The hand-held device of claim 14, wherein the first network 
service software component is a Virtual Bluetooth™ Dial-Up Profile 
Software component for providing packet switching in response to a 
circuit switching signal. 
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34) A system for providing communication between a wide 
area network and a wireless local area network, comprising: 

(a) hand-held wireless device having a cellular 
transceiver for communicating with the wide area network and 

5 having a storage device for storing a routing software component 

for transferring a plurality of packets between the wide area 
network and the wireless local area network, wherein the hand- 
held wireless device has a wide area network address; and, 

(b) a first wireless device having a 2.4 GHZ transceiver 
10 for transferring a first packet in the plurality of packets to the 

hand-held wireless device, wherein the first wireless device has a 
first local area network address. 

35) The system of claim 34, wherein the first wireless device is 
15 selected from a group consisting of a desktop computer, a laptop 

computer, a personal digital assistant, a headset, a pager, a printer, a 
watch, a digital camera and an equivalent. 

36) The system of claim 34, wherein the hand-held wireless 
20 device is a cellular telephone using a Global System for Mobile 

communications ("GSM") protocol. 

37) The system of claim 34, wherein the hand-held wireless 
device is a cellular telephone using a Code Division Multiple Access 

25 ("CDMA") protocol. 

38) The system of claim 34, wherein the hand-held wireless 
device is a cellular telephone using a CDMA2000 protocol. 
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39) The system of claim 34, wherein the hand-held wireless 

device is a cellular telephone using a Universal Mobile 
Telecommunications System ("UMTS") protocol. 

5 40) The system of claim 34, wherein the hand-held wireless 

device is a cellular telephone using a Time Division Multiple Access 
("TDMA") protocol. 

41 ) The system of claim 34, further comprising: 
10 (a) a second wireless device having a 2.4 GHZ transceiver 

for transferring a second packet in the plurality of packets to the 
hand-held wireless device, wherein the second wireless device 
has a second local area network address. 

15 42) An article of manufacture, including a computer readable 

medium, comprising: 

(a) a routing software component for translating between a 
wide area network address and a local area network address; 

(b) a short-range radio software component for providing a 
20 short-range radio signal in a wireless local area network; and, 

(c) a cellular software component for providing a 
communication signal in a cellular network. 

43) The article of manufacture of claim 42, further comprising: 
25 (d) an interface software component for allowing a network 

service software component to be added. 

44) The article of manufacture of claim 42, wherein the 
network service software component is a pairing management software 

30 component for determining whether a first wireless device is coupled to 
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the wireless local area network, responsive to a signal from a managing 
processing device in the cellular network. 

45) The article of manufacture of claim 42, wherein the 
5 network service software component is a virtual private network software 

component for establishing a secure link. 

46) The article of manufacture of claim 42, wherein the 
network service software component is a firewall software component. 

0 

47) The article of manufacture of claim 42, wherein the 
network service software component is a statistics software component 
for collecting usage information of the wireless local area network. 



15 48) The article of manufacture of claim 42, wherein the 

network service software component is a link optimization software 
component for converting an IP packet from a first wireless device in the 
wireless local area network to an optimized cellular protocol packet 
transferred to a processing device in the cellular network. 

20 

49) The article of manufacture of claim 42, wherein the 
network service software component is a reverse firewall software 
component for dropping a packet from a first wireless device in the 
wireless local area network. 

25 

50) The article of manufacture of claim 42, wherein the 
network service software component is a reverse firewall software 
component for dropping a packet from a first application software 
component on a first wireless device in the wireless local area network. 
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51) The article of manufacture of claim 42', wherein the 
network service software component is a flashing software component 
for providing a flash image to a first wireless device in the wireless local 
area network. 

5 

52) The article of manufacture of claim 42, wherein the 
network service software component is a message software component 
for providing a message between a first wireless device and a second 
wireless device in the wireless local area network. 

10 

53) The article of manufacture of claim 42, wherein the 
network service software component is a service level enforcement 
software component for limiting an amount of packets transferred from a 
first wireless device in the wireless local area to the cellular network 

15 during a period of time. 



54) A system, comprising: 

(a) a managing processing device in a first wide area 
network; 

20 (b) a hand-held device, coupled to the managing 

processing device and in a local area network, having a routing 
software component for transferring a plurality of packets 
between the first wide area network and the local area network; 
and, 

25 (c) a device, coupled to the hand-held device and in the 

local area network, for transferring a first packet in the plurality of 
packets to the hand-held device. 
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55) The system of claim 54, wherein the device has an 
application and wherein the managing processing device has a 
managing software component for accessing the application. 

5 56) The system of claim 55, wherein the application is a ring 

tone application. 

57) The system of claim 55, wherein the application is a phone 
book application. 

58) The system of claim 54, wherein the routing software 
component tunnels the plurality of packets to the managing processing 
device and wherein the managing processing device processes the 
plurality of packets. 

59) The system of claim 54, wherein the routing software 
component maintains a first IP session link with the first wide area 
network and a second IP session link with a second wide area network. 

20 60) The system of claim 54, wherein the routing software 

component maintains a first IP session link with the first wide area 
network responsive to the amount of IP packets received. 

61) The system of claim 54, wherein the routing software 
25 component initiates a first IP session link with the first wide area network 

responsive to a signal from the managing processing device. 

62) A system, comprising: 

(a) a managing processing device in a wide area network; 
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(b) a hand-held device, coupled to the managing 
processing device and in a local area network, having a software 
component for transferring a plurality of packets having an IP 
destination address from the wide area network to the local area 

5 network; and, 

(c) a device having the IP destination address, coupled to 
the hand-held device and in the local area network, for receiving 
the plurality of packets. 

10 63) The system of claim 62, wherein the software component 

is a routing software component. 

64) The system of claim 62, wherein the software component 
is a bridge software component. 
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Fig. 3b 
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